Privacy Policy

1. Introduction

3mbola ("we," "us," or "our") operates the online betting platform accessible at https://3mbola.cam. We are committed to protecting the privacy and security of our players' personal information. This Privacy Policy explains how 3mbola collects, uses, stores, shares, and protects your personal data when you register for an account, use our services, or otherwise interact with our platform.

This Policy applies to all individuals who access or use the 3mbola platform, including registered players, visitors to our website, and any person who contacts our customer support team. By accessing or using our services, you confirm that you have read and understood this Privacy Policy and consent to the data-processing activities described herein.

Please read this document carefully. If you have any questions or concerns about our privacy practices, contact us at any time using the details provided in Section 16.

2. Definitions

For the purposes of this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, either directly (such as a name or email address) or indirectly (such as an account number or device identifier).
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, and destruction.
• "Data Controller" means 3mbola as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of 3mbola under a data-processing agreement.
• "KYC" (Know Your Customer) means the identity-verification procedures we are required to perform to confirm your identity, age, and source of funds.
• "Cookies" means small text files placed on your device by our website to store preferences and session information.
• "Player" or "you" refers to any individual who holds a registered account on the 3mbola platform or who otherwise accesses our services.

3. Personal Data We Collect

3.1 Registration and Account Data

When you create a 3mbola account, we collect information you provide directly, including:

• Full legal name and date of birth
• Residential address (including city and province — e.g., Jakarta, Surabaya, Medan, Bandung, Bali)
• Email address and phone number
• Username and encrypted password
• Preferred currency (Indonesian Rupiah / IDR)
• Language preference

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and to prevent fraud, underage gambling, and money laundering, we may request:

• Government-issued photo identification (KTP, passport, or SIM)
• Proof of residential address (e.g., bank statement, utility bill)
• Proof of payment method ownership
• Source-of-funds documentation for large transactions
• Selfie or liveness-check images for facial verification

3.3 Financial and Transaction Data

When you make deposits or withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, or other supported payment methods, we collect:

• Bank account number (masked after verification)
• Transaction amount and currency (IDR)
• Date, time, and status of each transaction
• Payment reference numbers

We do not store full credit or debit card numbers on our servers. Card data, where applicable, is handled exclusively by certified Payment Card Industry (PCI-DSS) compliant third-party processors.

3.4 Gameplay and Betting Data

As you use 3mbola services — placing bets on football (including BRI Liga 1 and EPL), playing togel (Indonesia's traditional numbers lottery), or participating in live casino sessions — we collect:

• Bet history, game history, and session logs
• Wager amounts, outcomes, and winnings
• Game preferences and favourite categories
• Bonus and promotion usage records
• Responsible gaming settings and limit histories

3.5 Technical and Device Data

When you access our platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Pages visited, time spent, and navigation paths
• Session start/end times
• Error logs and crash reports

3.6 Communications Data

When you contact 3mbola customer support via live chat, email, or WhatsApp, we collect and retain records of those communications, including the content of messages, attachments submitted, and the date and time of contact.

Data Category	Examples	Primary Purpose
Account Data	Name, email, phone, address	Account creation and authentication
KYC Data	ID documents, selfies	Age verification, fraud prevention
Financial Data	Bank account, transaction records	Payment processing, AML compliance
Gameplay Data	Bet history, game logs	Service delivery, responsible gaming
Technical Data	IP address, device info	Security, platform optimisation
Communications Data	Support chat transcripts	Dispute resolution, service improvement

4. How We Collect Your Data

3mbola collects Personal Data through the following means:

• Directly from you — when you register, complete KYC, make deposits or withdrawals, place bets, update your account settings, or contact customer support.
• Automatically — through cookies, log files, and similar technologies as you browse and interact with the 3mbola website and platform features.
• From third parties — including KYC and identity-verification service providers, payment processors, fraud-detection services, and publicly available sources where permitted by law.

5. Legal Basis for Processing

3mbola processes your Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing is required to perform the contract between you and 3mbola — for example, creating your account, processing deposits, settling bets, and paying out winnings.
• Legal obligation: Processing is necessary to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations under our international gaming licence, and cooperation with lawful regulatory requests.
• Legitimate interests: Processing is necessary for 3mbola's legitimate business interests, provided those interests are not overridden by your rights — for example, fraud prevention, platform security, service analytics, and responsible gaming monitoring.
• Consent: Where we rely on your consent — for example, to send you marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. How We Use Your Personal Data

3mbola uses the Personal Data we collect for the following purposes:

6.1 Service Delivery

• Creating, verifying, and managing your account
• Processing deposits and withdrawals via Indonesian banks and e-wallets
• Accepting, settling, and recording bets and game outcomes
• Applying bonuses, promotions, and loyalty rewards to your account
• Providing 24/7 customer support in Indonesian and English

6.2 Compliance and Legal Obligations

• Verifying your age (21+ requirement) and identity through KYC procedures
• Monitoring transactions for suspicious activity under our AML obligations
• Maintaining records as required by our international gaming licence
• Responding to lawful requests from regulatory authorities or law enforcement agencies

6.3 Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent transactions, account takeovers, and other illegal activity
• Identifying and blocking duplicate or multi-account registrations
• Monitoring for unusual betting patterns that may indicate collusion or abuse
• Enforcing self-exclusion and responsible gaming restrictions

6.4 Platform Improvement

• Analysing aggregated usage data to improve website performance and user experience
• Testing new features, products, and game content
• Understanding player preferences to personalise game recommendations and promotions
• Generating internal reporting and business analytics

6.5 Marketing Communications

With your consent, we may send you promotional emails, SMS notifications, or in-platform messages about new games, seasonal promotions, bonus offers, and 3mbola news. You can opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting customer support. Opting out of marketing will not affect transactional communications related to your account.

7. Data Sharing and Disclosure

3mbola does not sell, rent, or trade your Personal Data to third-party advertisers or data brokers under any circumstances. We share your data only in the limited circumstances described below:

7.1 Service Providers and Data Processors

We engage carefully selected third-party service providers to assist us in operating the 3mbola platform. These providers act as data processors under contractual obligations that restrict them from using your data for any purpose other than performing services on our behalf. Categories of service providers include:

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers to facilitate deposits and withdrawals
• KYC and identity-verification providers: Third-party verification services that validate government-issued identity documents
• Fraud prevention and security services: Providers that analyse transactions and user behaviour to detect and prevent fraud
• Cloud infrastructure and hosting providers: Secure, access-controlled server environments in which your data is stored and processed
• Customer support tools: Live chat and ticketing platforms used by our support team
• Analytics providers: Services that process aggregated, anonymised usage data to help us understand platform performance

7.2 Regulatory and Legal Disclosure

We may disclose your Personal Data to competent authorities, regulators, or law enforcement agencies where we are required to do so by law, court order, or the terms of our international gaming licence. We will notify you of such disclosures where we are legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 3mbola's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

8. Cookies and Tracking Technologies

The 3mbola website uses cookies and similar tracking technologies (such as web beacons and local storage) to deliver and improve our services. Below is a summary of the types of cookies we use:

Cookie Type	Purpose	Duration
Strictly Necessary	Enable core platform functions such as login sessions, account security tokens, and language preferences	Session / up to 1 year
Performance	Collect anonymised data on page load times, error rates, and navigation paths to improve platform stability	Up to 2 years
Functional	Remember your display preferences, bet slip settings, and other optional configurations	Up to 1 year
Analytics	Aggregate statistical data on how players use the platform to guide product development decisions	Up to 2 years

We do not use third-party advertising or retargeting cookies. You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to log in and use core platform features.

9. Data Retention

3mbola retains your Personal Data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, subject to the following principles:

• Active accounts: We retain your account data and transaction records for the full duration of your relationship with 3mbola and for a minimum of five (5) years after account closure, as required by our AML and licensing obligations.
• KYC documentation: Identity verification documents are retained for a minimum of five (5) years from the date of verification, as required by applicable anti-money laundering regulations.
• Communications data: Customer support transcripts and related communications are retained for up to three (3) years to assist with dispute resolution and service quality monitoring.
• Technical logs: Server and access logs are retained for up to twelve (12) months for security monitoring purposes, after which they are either deleted or anonymised.
• Marketing data: If you withdraw consent for marketing, we remove your contact details from marketing lists within 30 days, though we retain a record of your opt-out to prevent future accidental contact.

Where retention beyond these periods is required by law, regulatory directive, or ongoing legal proceedings, we will retain the relevant data until those requirements are satisfied.

10. Security Measures

3mbola implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction:

• TLS/SSL Encryption: All data transmitted between your device and the 3mbola platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Data encryption at rest: Sensitive data stored in our databases, including KYC documents and financial records, is encrypted using AES-256 or equivalent standards.
• Access controls: Access to Personal Data is restricted to authorised 3mbola personnel on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and receive regular data-protection training.
• Multi-factor authentication: Administrative access to systems containing Personal Data requires multi-factor authentication (MFA).
• Regular security audits: We conduct periodic vulnerability assessments and penetration tests conducted by independent third-party security firms.
• Incident response: We maintain a documented data breach response plan. In the event of a breach affecting your rights and freedoms, we will notify you and relevant authorities within the timeframes required by applicable law.

11. Your Data Rights

As a player on the 3mbola platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our customer support team using the details in Section 16. We will respond to all valid requests within thirty (30) days.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, together with information about how we use it.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you have the right to request correction. For account details such as your name, address, or contact information, you may also update these directly in your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your Personal Data. This right is subject to overriding legal obligations — for example, we cannot delete transaction records that we are legally required to retain for AML compliance.
• Right to Restriction: You have the right to request that we restrict the processing of your Personal Data in certain circumstances, such as while a dispute regarding accuracy is being resolved.
• Right to Data Portability: You have the right to receive the Personal Data you have provided to us in a structured, commonly used, machine-readable format, and to request that we transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12. Children and Minors

3mbola services are strictly for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory part of our registration process, and we conduct additional KYC checks to confirm eligibility before processing any withdrawal request.

If we discover that a minor has registered an account or that an account holder is under the age of 21, we will immediately suspend the account, void all bets placed, and refund any remaining balance after deducting applicable bonuses, before permanently closing the account. If you believe a minor has registered on our platform, please contact us immediately at the details provided in Section 16.

13. International Data Transfers

3mbola operates internationally and your Personal Data may be transferred to, stored, and processed in countries other than Indonesia. Whenever we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards may include contractual clauses that impose data-protection obligations on the recipient, or reliance on the recipient's participation in a recognised data-protection framework.

By using the 3mbola platform, you acknowledge and consent to the transfer of your Personal Data to servers and processors located outside Indonesia where necessary for the delivery of our services.

14. Third-Party Links

The 3mbola platform may contain references to third-party services, such as payment providers and game studios. These third parties operate under their own privacy policies, which we do not control. We encourage you to review the privacy policies of any third-party services you interact with. 3mbola accepts no responsibility for the data-handling practices of third parties.

15. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data-processing practices, regulatory requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the bottom of this page and, where appropriate, notify registered players by email or via an in-platform notification.

We encourage you to review this Privacy Policy regularly. Continued use of the 3mbola platform after the publication of an updated policy constitutes your acceptance of the revised terms.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or 3mbola's data-processing practices, please contact our dedicated privacy team:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the 3mbola platform
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 days

Our customer support team includes native Indonesian-speaking agents available around the clock across all time zones served by our platform, including WIB (Western Indonesia Time, UTC+7), WITA (Central Indonesia Time, UTC+8), and WIT (Eastern Indonesia Time, UTC+9).